infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Land #11714, DUMP_OUTPUT fix for SA-CORE-2019-003

master
William Vu 2019-04-11 12:23:12 -05:00
parent 7b29e6e057 4dc2a86b7b
commit 8fcc36b6a0
No known key found for this signature in database
GPG Key ID: 68BD00CE25866743
2 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
documentation/modules/exploit/unix/webapp/drupal_restws_unserialize.md
View File

@ -45,6 +45,11 @@ to work.
Set this to a node ID on the target when using the `GET` method.
**DUMP_OUTPUT**
Enable this if you'd like to see HTTP responses, including command
output. Defaults to `false` unless `cmd/unix/generic` is your payload.
## Usage
```

7
modules/exploits/unix/webapp/drupal_restws_unserialize.rb
View File

@ -75,9 +75,10 @@ class MetasploitModule < Msf::Exploit::Remote
))
register_options([
OptEnum.new('METHOD', [true, 'HTTP method to use', 'POST',
['GET', 'POST', 'PATCH', 'PUT']]),
OptInt.new('NODE', [false, 'Node ID to target with GET method', 1])
OptEnum.new('METHOD', [true, 'HTTP method to use', 'POST',
['GET', 'POST', 'PATCH', 'PUT']]),
OptInt.new('NODE', [false, 'Node ID to target with GET method', 1]),
OptBool.new('DUMP_OUTPUT', [false, 'Dump payload command output', false])
])
register_advanced_options([